A collection of activity patterns that have already been identified and categorized and that typically indicate suspicious or malicious activity.